Specify model for all JSON HTTP requests.
Fix broken authorisation header setup.

Slipped through the cracks in be56dec0.
0.17.1 released.