added password timeout before internal deletion