fix(oauth): increase the assertion lifetime to avoid clock skew issues

Fixes #1649.

@ckarlof r?
Separate PR, @pdehaan.