Allow bypassing form input injection

It's nice to be able to bypass all the complex HTML parsing/injection if you don't need it.  In my case, I do all my requests via AJAX and can read the token from the cookie/headers and just use the header in my requests, so I don't need all the parsing and injection to happen on every request.