time out user after 3 min