`validAuthKeys` in `AuthenticationHandler` never time out

[cabbagegod]

All ServerAuthenticationKeys should have some kind of time out system that causes them to become invalid after 60 seconds has passed.