Move the logout timeout out of the login service

This allows more flexibility in implementing other ways to ask the
user for confirmation to log out/poweroff/reboot.