[bugfix] Wrong timeout check: login tokens timed out immedately.

They should remain valid for a few seconds or the user gets logged out too quickly if requests come in with a delay.