made expires_at nullable as we dont use it in crate