Comment by pmachinery

For future reference, and for anyone interested, not only do (ICANN accredited) have to provide a transfer authcode within 5 days of being requested, it's also possible to transfer a domain after it has expired, as long as it's still within the renewal grace period.