return custom errors when verifying a token
add "grace period" for token in which the token can be reissued with the old one