Change default json_encode() option to be more secure

Current implementation has no option of json_encode(). So json output might be a cause of XSS if it is interpreted in HTML contexts.

This PR changes Fuel's default option of Format class to be more secure, and make it configurable.