fix: config.timeout now used for inactivity