Better enforce request timeout

Using only _mechanize is not enough as some methods call _request
directory. In _request we have full control over requests going out of
this class and can properly control timeout.