Seems weird to me to also specify timeouts at the end of setting up auth. Maybe extend HttpAdapter to have a 'set_timeouts'? I'm not sure how big of an issue timeouts is going to be for other people though, so maybe this is just silly.