Remove System.Security as a reference since we use MS.Owin.Security.
Remove unused member on ServerResponse.
Disabling the Http Client timeout

#1908
Merge branch 'release' into dev