give requests a timeout