Support for timeouts in auth_tkt

[catlee]

This patch modifies paste.auth.auth_tkt to handle timeouts similar to how mod_auth_tkt does.

You can specify a timeout parameter and a refresh parameter to the middleware. If the timeout elapses, the cookie does not grant access any more.

If (refresh * timeout) seconds have passed since the cookie was created, the cookie is refreshed.