Make OAuth tokens API more resilient

Summary

1. Don't use .json at the end of the GET request. It's not needed.
2. Handle valid_until being undefined, null, or empty string. It's possible that tokens can never expire. In that case, simply hide the date.