Do not use expired tokens in external_auth

Currently salt_token files that are older than token_expire are still used, resulting in a failed authentication.  This checks the modified time of the file and ignores files beyond the configured token_expire for that user.