I suggest we change the error message when a login times out or a code is not valid to:

"This page is no longer valid, please retry login from the application" and also include a link to the application if available.

I think that's more user friendly than "You took to long" and "We're sorry...".