Stale OneUseStore nonces never release memory

[clagraff]

When using the OneUseStore, nonces can be generated without having any method of forcing their removal. This means an attacker could continue to make unauthenticated requests in order to generate more nonces which will never be removed, thus eating away at the servers resources.

[clagraff]

This would also affect the LimitedUseStore that is currently in progress.

[clagraff]

Here is how it should be handled: There should be one Store type, which takes a limit amount and a duration amount.
Have a coroutine clear our expired tokens, and add all the rest of the functionality.
store := NonceFactory(3, 1 * time.Second) could return a store which limits nonce to a lifetime of 1 second and a usage-limit of 3.

[clagraff]

Addressed ☑️