Pass validFor into authenticateToken