force timeout on token request after 5 mins