Also move UserException into nfw_database where it should have been all along

Move DuplicateHostnameException into the module that uses it

On second thought, don't need to set expiry when rejecting