Expiring signatures are now defined in ms
Added config option for expiring token (default 2 mins)
Added test code for expiring token login