Autoresync counter

When a hardware/software token has drifted too far into the future, autoresync
advances the counter to resync. This only happens if a sufficient number of
good tries happened in sequence. Each of those good tries will be denied, the
next one however will resync the counter.