[!!!][TASK] Cleanup dual-use of auth_timeout_field in AbstractUserAuthentication