use :create_additions to force creation of Ruby objects from JSON (post CVE-2013-026)