add a timeout for the /me call at login, and remove automatic permission refresh since that is already done once a day by FB