fix(expiry): fix an issue where token expiration checks were too permissive