Fix acceptance tests
Add support for password expiration and fix token validation