server: added api request timeout