karam: correctly calulate penalty days (was off by

a thousand (Date.now() is milliseconds, not seconds)