No need to check for expired authorization codes. Make the Token#expired! method to expire the token immediately.