Make `expires_at` return Time, not num of seconds

This will make it consistent just as in the other omniauth-... libraries (f.e. facebook, google, windowslive).