change to a 5 minute window of accepting valid codes
Merge branch 'master' of heroku.com:authful