Relax rate-limiting on replacement ID verification requests

Requests which are 30 seconds old can be replaced now. Previously it was
a minute, but that was too long.