Add token expiration timeout