Allows authorization only for Invoice tokens, and adds ability to expire in custom time