timeout handling: use LOGINS instead of IP (also, as a result moved the timeout table update to message handling stage)