When the request has no valid form keys but the query does, it is still valid.