One-time link should be active immediately

The way one-time login attempts are currently handled, it takes up to one second for the link to become active. This is caused by the fact that the timestamps (in seconds) are compared using GT/LT instead of GTE/LTE).

While this would probably not lead to any issues in a real-world scenario, it leads to some hacks during testing (for example the use of "sleep(1)" in the current version of user.test and the "test sometimes fail"-message in #293487: TestingParty08: User password reset).

I propose we make the one-time link work immediately. Patch attached.

    // Time out, in seconds, until login URL expires. 24 hours = 86400 seconds.
    $timeout = 86400;
    $current = REQUEST_TIME;
    // *snip*
    if ($timestamp < $current && $account = reset($users)) {
      // No time out for first time login.
      if ($account->login && $current - $timestamp > $timeout) {
        // *snip expiration message*
      }
      elseif ($account->uid && $timestamp > $account->login && $timestamp <= $current && $hashed_pass == user_pass_rehash($account->pass, $timestamp, $account->login)) {