Add workaround for CVE-2013-0269

- Added 2nd argument :create_additions => false to JSON.parse
- ref: http://www.ruby-lang.org/en/news/2013/02/22/json-dos-cve-2013-0269/