Add configuration attribute for making self.write serialize lists

Although this can pose a security risk, if carefully used (for example protecting the request URL with a XSRF token) can be ok.

The default is anyways set to False (lists don't get serialized) as previous behavior used to be.