Add token timeout after period of inactivity
Refresh the timestamp on the token after verification

We track activity so that we can timeout inactive session.
Change DB column names to camelcase

Too much friction trying to retain snake case in database schema.