Handle edge cases in filtering

**Feature request**
It would be great to have timeout for auth.

**Use case**
Many users need this functionality for production deployments.

**Implementation idea**
Add a new config option `enable_timeout` with default `false`.

No file or test is named in the issue. Start by locating the authentication configuration and filtering path, then clarify the timeout duration and what behavior it should control. Done means the new enable_timeout option defaults to false and the agreed timeout behavior is covered by tests.

Written by the indexing model from the issue text.