Added basic JSON query, requires CSRF token