WIP: Add expire time for token auth

#222 & #221
Indeed, Cron is already implemented, I thought it can be a nice house-keeping with a small impact.