This adds some settings to the Authentication settings page for the

upcoming client web-based logon flow. There is a new section for

general API Authentication settings, with a field for setting the

automatic expiration of client API tokens.

Ran unit tests.
Manually tested the settings page putting different expirations,

  saving the form, playing with other settings.