removed the requirement for a form and schema argument on the .token() method

You've identified (via code comment) the token() method returns only a string.

Because of this, the marshalling doesn't matter, so let's force it to be json and a default schema.

If not specified, get set to 1.0.

duration, and idleTimeout can still be overridden.