set the default for default_priorities to only 'html' for security reasons
refactored the FormatListener and FormatNegotiator to allow configuration