allow each token to define its own validity time