check expiry on auth token