fixed opAddJSONHijackingProtectionSafeguard checks USER_AGENT environment value, not User-Agent HTTP request header (fixes #2)
added protection for JSON Hijacking attack by using IE's VB Script (fixed #1)
modify REDME.rst to adjust da02915a40f64004d3aa70e70359c370ac5db276 changes