Avoid writing entire api key in log file.
Add support for sliding tfa expiration. close justcoin/snow#386