actually check the auth ticket expires value to make sure that the ticket hasn't expired and someone tried to pull a fast one