Access tokens can now be created with an expiration date

Access tokens can now be created with an expiration date. Previously, tokens never expired and had to be revoked manually if you wanted to invalidate one.

When creating a token, you can choose no expiration to keep the previous behavior, pick a preset of 7, 30, 60, 90, or 365 days, or set a custom number of days.

Tokens with an expiration date stop working automatically once it passes. No manual cleanup needed.