Adds a json prefix setting.

Adds a new optional setting called `json prefix` for prefixing a value to the body of json responses in order to prevent [json hijacking](http://haacked.com/archive/2009/06/25/json-hijacking.aspx).

Could technically be external middleware, but seems simple enough to live inside `.json()` like the rest of the json settings.