update expires in.
Maybe don't error on bad request.