Updated config comments for lockout and expiration time - resolves issue #408