Add timeout to requests to OIDC_USER_ENDPOINT

[sciurus]

The lack of a timeout is relatively low risk here, but we should still have one.

normandy/normandy/base/api/authentication.py

Line 108 in ca25e01

response = requests.get(url, headers={"Authorization": f"Bearer {access_token}"})