Allow auth http.Client timeout to be configurable

Currently the auth package has a hardcoded timeout of 5s which might not be enough for some setups.

Proposal:

Edited by Naman Jagdish Gala