More clarity around token instantiation in readme

Failure to include `expired_at` leads to client errors if you try to re-use tokens. Hoping this can help people avoid such an issue