Parsing an expired token should just return None

instead of raising an exception.  It seemed like a good idea before, but
practically, it doesn't really make sense.