refactor the download token expiry. .expired? should be an instance method.