Output format plugin

This is early work. I just wanted you to have a peek to the direction this is turning into.
> Right now we're using it for CSRF token requests.

So the CSRF is also returning inside ``data``? that sounds wrong to me.