Add is_expired property

Fixes the 500 internal server error for logging in after resetting
password. Closes #398.