better input validation for app expiration period