configuring current clock and clock tolerance

[lwansbrough]

In client environments with unsynced clocks, jwt timestamps can be ahead or behind the user's clock by an amount greater than the tolerance.

What we see most often is users will have their current time set according to their wall clock, but their timezone is set to somewhere else in the world, so the coordinated time on their computer is off by several hours.

[panva]

https://github.com/panva/oauth4webapi/releases/tag/v2.2.0