Web-API: Option to deactivate TimestampOlderThanLastRequest validation

[mgesing]

See forum.

Think about using headTimestamp as apiUser.LastRequest rather than API server time. It's safe because headTimestamp is part of the message signature.

[mgesing]

Resolved.