set timeout for xhr request