add a timeout for login /me request, set it in initialize()