def pape_requirements_met?(auth_time)
      return true unless pape_request && pape_request.max_auth_age
      (Time.now - auth_time).to_i <= pape_request.max_auth_age
    end
def pape_requirements_met?(auth_time)
      return true unless pape_request && pape_request.max_auth_age
      (Time.now - auth_time).to_i <= pape_request.max_auth_age
    end
If the request contains a max_auth_age, the last authentication date
 must meet this requirement, otherwise the user has to reauthenticate:
 http://openid.net/specs/openid-provider-authentication-policy-extension-1_0-02.html#anchor9