[Reviewer Andy] Fix for issue 175 - also includes addition of 30 second grace period before expired public user identities are considered unauthenticated

Andy

Can you review please.  I've tested live with my Infinispan test set-up after I hit the issue during testing.  It also passes all the UTs.

Mike