set expiry in policy to 5 minutes from now, in UTC
Merge pull request #24 from brendan-sterne/master

Use UTC time for 'expires' field in policy, and shorten the duration (for security)