implemented login timeout