Want background task for cleaning up expired tokens and sessions

[david-crespo]

Probably two jobs, but they'll work exactly the same way. We hard delete tokens and sessions when you try to use one that's expired, but that still leaves a ton of expired ones around.