This change didn't make it into the last commit. Allow the user to override the time column in the database by setting the __timestamp item in the call to set. This should make expiration of CSRF otk's work correctly for the rdbms backend.