added a test for expired tokens