Manage expiration in transaction authorization
Transaction authentication token doesn't need to include expiration in the plain text part
Do token/transaction verification