OOIION-865
The valid_until coming from the real certificate is in different units than the valid_until coming from the signon bypass.  Real certificate = epoch seconds.  Bypass = epoch seconds * 100.  Now things are set to look for the real certificate units.  So when a user uses the bypass, the valid_until date is way in the future.  At some point, someone needs to figure out why the units differ.  Until then, it should work fine for production and never really expire for bypass logins.
Merge pull request #311 from cgalvarino/valid_until_fix

OOIION-865