Add expiry date to userId

After the user signs in, their login is valid for 6 hours before they
have to log back in again.

This is designed to prevent issues with users having been assigned IDs
which are no longer in the database