fix(expiry): fix an issue where token expiration checks were too permissive

Looks like the expiration check in `token_is_current?` would have always passed. Let me know if there's something I'm missing here.