More JSON helpers in specs

This change encapsulates GDS-SSO token authentication and the API headers.

/cc @alext