Bring back the json string
Slightly more readable auth header
Parameterize duration