sage-dev: password timeout should start after all prompts