We might also want to ensure that the token is valid for an extra minute or so, just to be on the safe side