wnd.close on auth timeout; doubled state session duration

Signed-off-by: Arnaud Richard <a.richard@webshell.io>