server-sided code checking script only finds 1 value in a table?

Trying to make a script that checks a code a player sent from the client to the server and returns a value depending on if the code is correct or not.

--Codes
game.ReplicatedStorage.RedeemCode.OnServerInvoke = function(player, codesent)
--Get DataStore

--Get Codes

local valid = {
"test1",
"test2"
}

local expired = {
"test"  
}

--Check Codes
for i,expiredcodes in pairs(expired) do
    if expiredcodes == codesent then
    return("expired")
end

for i,codes in pairs(valid) do
    if codes == codesent then
        return true
    else
        if codes ~= codesent then
            return false
            end
        end
    end
end


end

so what I don't understand is that the table with both valid & expired codes work but only if it's the first code on the table.

However if it's on the second line it returns it as invalid.