Test cases for _csrf_token in json data