Harden NTLM authentication and restore SGU profiles

src/SGU.AuthBroker/Options/BrokerOptions.cs

@@ -32,7 +32,7 @@ public sealed class BrokerOptions
         }
 
         if (Ntlm.TimeoutSeconds is < 2 or > 60 ||
-            Ntlm.ProfileTimeoutSeconds is < 2 or > 30 ||
+            Ntlm.ProfileTimeoutSeconds is < 2 or > 90 ||
             Ntlm.MaxRedirects is < 0 or > 10)
         {
             throw new InvalidOperationException("NTLM timeout or redirect limits are outside the supported range.");
@@ -122,7 +122,7 @@ public sealed class NtlmOptions
 
     public int TimeoutSeconds { get; init; } = 20;
 
-    public int ProfileTimeoutSeconds { get; init; } = 10;
+    public int ProfileTimeoutSeconds { get; init; } = 60;
 
     public int MaxRedirects { get; init; } = 5;