Make auth_time actually reflect the time of authentication.