Support payment expiry

Works on user payment authorization and session cookie for now.

Fixes #55