Optimize handlers for large datasets

**Feature request**
It would be great to have timeout for auth.

**Use case**
Many users need this functionality for production deployments.

**Implementation idea**
Add a new config option `enable_timeout` with default `false`.

Start by locating the authentication handlers and configuration entry points in the repository, then trace how authentication requests are currently handled. Clarify which authentication operation the timeout covers and how expiration should behave; done means the new enable_timeout option defaults to false and the agreed timeout behavior is covered by tests.

Written by the indexing model from the issue text.