Tweak the authKey with the number of hours since the epoch.

This gives each authenticated handshakeRequest a window of validity.
The server side checks epochHour - 1, epochHour, and epochHour + 1 to
allow for clock skew with the client, and a replay detection filter of
some sort will be added.