Pairing code expiry

This change returns a `user_code_expired` error from POST /token if the user code has not been verified by the user after a fixed time period.