Use TTL index to auto-clean expired session tokens

MongoDB takes care of the cleanup for us