fixed normalize_credentials to set kind of :token_expires_at