Expose VerificationKeyStaleDurationMinutes to web.config

The 20 minute default is too short.
Missed an edit
Merge pull request #402 from rallman/master

Expose VerificationKeyStaleDurationMinutes to web.config