Otherwise clients would detect timeouts before a heartbeat has a chance of reaching them. The new values themselves were suggested by @rauchg. I myself think that the heartbeat timeout should probably only be ~10s larger than the interval.
…Control-Origin logic is needed in the http and xhr-polling transports
This reverts commit c110036.