All of the other POST request have `expires -1;`. Given that these are POST request, I'm not convinced that's actually required. However, as all of the other ones have it, I've added it here as well. If it is not required, we can follow up with a PR that removes it from all of them.