Token auth: send lifetime parameter as a string