Make the expiration time configurable for token auth.