Phoenix Identity: check token expiry upon launch / resume