timeouts now apply on token & access requests (it was a bug), default timeout to 2s like Scribe 1.3.3, slf4j-api 1.7.2