only use token_file if modified within token_expire time
use time.mktime, not time.strftime
Merge pull request #10980 from erchn/develop

Do not use expired tokens in external_auth