add token expiration
add tests
correct jscs errors