Automated Analysis of Timed Security: A Case Study on Web Privacy