Require expiration for access tokens