Cross-server request timestamp validation