auth: increase timeout