Update maxAuthAge to use Duration.ZERO