check for invalid session token durations
update to load all signing certs