Adding token expiration, and adding admin authorization via jwt.