Tweak error wording

app/config.py

@@ -213,6 +213,6 @@ def verify_csrf_token(
         logger.exception("Failed to verify CSRF token")
         raise HTTPException(
             status_code=403,
-            detail=f"The security token expired, {please_try_again}",
+            detail=f"The security token has expired, {please_try_again}",
         )
     return None

app/indieauth.py

@@ -276,7 +276,7 @@ async def _check_access_token(
     if now() > access_token_info.created_at.replace(tzinfo=timezone.utc) + timedelta(
         seconds=access_token_info.expires_in
     ):
-        logger.info("Access token is expired")
+        logger.info("Access token has expired")
         return False, None
 
     return True, access_token_info