add timeout to check token status