Test JSON validation rejects extra fields