[Security] Implement auto expiration of auth token

[om26er]

A token cannot be of a life time, we should expire it, forcing the users to re-authenticate. Not sure about "how often" though

[om26er]

This needs to be intelligent. A token should only expire if it's not used since X days