added better error feedback for authentication
fixed missing timeout verification in Auth.pm webkey check