Feature: custom error type ErrTokenExpiredError

[hazcod]

This changes the token_validator to return a ErrTokenExpiredError instead of ErrTokenValidationError. This allows us to check for token expiration which differs from a regular token error. (e.g. trigger a refresh).

[hazcod]

FYI @o1egl