Fixed small but important typo in HeaderAuthenticatorSettings doc string

There is a small but important typo in the `HeaderAuthenticatorSettings` docs. The `authenticatorExpiry` is implemented in seconds (default is 12 * 60 * 60) but the docs say minutes.