add failing test for expired token
first parameter of token must be expiry epoch timestamp