v3.2.1

Fixes

• When determining the session's expiration time from a JWT, prefer the session's expires_at value over the "exp" claim.
• When using the "exp" claim as the session expiration, use the same string formatting as the other timestamps.