moved signin message expiration to authentication options class