expires stores the token expiration time
modified authorize method to take session expiration into account