Re-used authentications now bump up expires_at.