Require recent authentication for changing settings

[lukegb]

Check that the user has presented their credentials in the last 10 minutes before allowing changing settings - related to #6.