Invalidate Refresh Token after certain time has passed

Use `https://identitytoolkit.googleapis.com/v1/accounts:lookup?key=${config.apiKey}` in fbAuth.js to determine last time user has refreshed the page/logged in.
More information can be found [here](https://firebase.google.com/docs/reference/rest/auth#section-get-account-info).