add timeout for curl, update guzzle version