Add token expiration to settings