fixed part of login timeout logic treating new seconds field as minutes