We no longer need the expiration as we now check wether it's there or not. If not, only the token is checked.