increase shibboleth timeout

This matches the changes made in puppet-hilary to prevent false positive replay attack detection