Stretch assertion expiration to 25 hours
There aren't really any major vulnerabilities associated with this,
and so we can afford to be forgiving of servers with inaccurate
timekeeping.