remove comment, and re-add the timeout for password caching