expires and userId were exchanged

The code does not work without this change