Don't delete token when used, show as expired instead

This allows to display the time a token has been used