Tweaks to how Authenticator handles timestamps

Timestamps have to be valid (no later than now), and no earlier than ten
minutes ago.