use "+X days" syntax for expiration, thus avoiding timezone problems