Testing different CSRF parameters
Changed parameters check to be format specific (html, json)