totp: expire old TOTP tokens after 10 days, not 10000 days