use timeout instead; quote url