Merge pull request #769 from kmala/master

add default timeout for http client

pkg/token/token.go

@@ -457,6 +457,7 @@ func NewVerifier(clusterID, partitionID, region string) Verifier {
 			CheckRedirect: func(req *http.Request, via []*http.Request) error {
 				return http.ErrUseLastResponse
 			},
+			Timeout: 10 * time.Second,
 		},
 		clusterID:         clusterID,
 		validSTShostnames: stsHostsForPartition(partitionID, region),