adding timeout to oauth config