added nosniff to json response