Why is this dependent on redis, let alone any database ? Couldn't you just encode the username and expiration date in a URL along with a message authentication code or cryptographic signature over the data? It should scale way better and not involve installing a whole new database.