Add timeout for initial persona login (bug 1002510)

since this injects functionality into the app view (which seems wrong) it makes me think again that login logic should not be in its own view but rather in middleware wrapped around the main view so that it's always persistent. Just a thought. We can maybe explore that later.