fix(oauth): increase the assertion lifetime to avoid clock skew issues

Fixes #1649.

@ckarlof r?
As you wish. Filed as #1657