There are some circumstances when it might be a good 5 minutes from receiving the TFA code on my phone to being able to enter the code into my browser. So it would be good to, before receiving the authorization code, either;
1. temporarily change the default timeout from 60 seconds to (e.g.) 300
OR/
2. permanently change it, from 60 seconds to (e.g.) 300, but be able to change it back
Maybe have a maximum setting of 600 seconds
