changed > to <, so test for valid auth token passes

js/erp5_loader.js

@@ -4345,7 +4345,7 @@
               // test for timeout
               if (auth_config.issued && auth_config.expires) {
                 expires = auth_config.issued + auth_config.expires;
-                if (expires > stamp) {
+                if (expires < stamp) {
                   valid = true;
                 } else {
                   expired = true;