saveuser: expire in 365 days

Also use strict type checking