fixed expire date for authentication
added todo for AuthenticationHandler