add 10sec timeout to third party API requests

[fixes #30]