allow only json format requests from controllers
clean html a bit