allow configurable request timeout