1. Change LifeTime -> notbefore and expires. Removes dependency on obsolete API
2. Return list of audiences to prepare for OIDC ProtocolValidation when multiple audiences are sent
3. Added DefaultTokenLifetime for creation of tokens.