I'm not sure if I completely understand your question... Are you asking for the way to disable GET requests to a JSP file so that the userid and token parameters cannot be provided to the JSP file...