added server-side timeout on anonymous connections