add option duration

[hamishhossack]

Add option to allow session duration manipulation.

Default to 24 hours: 24 60 60 * 1000

usage;

oauth: {
    duration: 1000 * 60 * 60 * 24 * 365 * 2, // 2 year session duration
}