Feature: add expiration to JWT

config/security.js

@@ -1,7 +1,8 @@
 module.exports = {
     jwt : {
-        secretOrKey : 's3cr3t',
-        issuer      : undefined,    // accounts.examplesoft.com
-        audience    : undefined     // yoursite.net
+        secretOrKey         : 's3cr3t',
+        issuer              : undefined,    // accounts.examplesoft.com
+        audience            : undefined,    // yoursite.net
+        expiresInMinutes    : 60*8          // 8 hours
     }
 }