log expired tokens

[pameyer]

What this PR does / why we need it:
Allow sysadmins to log access from expired API tokens.

Which issue(s) this PR closes:

Closes #6495

Special notes for your reviewer:

Suggestions on how to test this:
curl -i -H "X-Dataverse-key: $valid_token" -X GET "http://localhost:8084/api/dataverses/:root" ; edit database to set expiration date to past, repeat curl call ; check system.log

Does this PR introduce a user interface change?:
no

Is there a release notes update needed for this change?:
no

Additional documentation:

[coveralls]

Coverage decreased (-0.0003%) to 19.504% when pulling 4bc8fda on 6495-log_expired_tokens into af4c0b0 on develop.

[kcondon]

@pameyer This works for an expired token but not an invalid one, which is the other case mentioned in your ticket. Correction: your ticket title mentions both invalid and expired but your use case in the ticket specifically mentions expired due to long running jobs. Closing.

[pameyer]

@kcondon Good catch - I should've done a better job with the title.