I suggest we change the error message when a login times out or a code is not valid to: "This page is no longer valid, please retry login from the application" and also include a link to the application if available. I think that's more user friendly than "You took to long" and "We're sorry...".