Fix token expiration issue: remove strict clock skew and add default expiration

Initial clean backend commit