set auth timeout to 1 hour