Fix an OAuth corner-case bug when an access token is passed in with no expiration timestamp