add max size to oauth verification cache

[rfk]

To guard against DOS attacks we should put a hard upper bound on the size of the oauth verification cache.