letting iOS devices with expired token through