Set the default request timeout to something other than `None`

[plamut]

The AuthorizedSession.requests() method does not specify a default timeout.

Since production code would almost always want to have some sort of a timeout, let's add one. The libraries that rely on google-auth, but do (yet) not specify a timeout themselves, would benefit from that.

Example: storage issue