fix(oauth): increase the assertion lifetime to avoid clock skew issues

Fixes #1649.

@ckarlof r?
Yeah, that's a bit easier to read but maybe not worth the cost (extra dependency/bytes) vs benefit (more readable, but no year support? c'mon).