Ignore leading non-JSON characters in non-JSONP mode

This accomodates a workaround for a known JSON flaw, which involves
prepending "while(1);" to otherwise-valid JSON responses. See
http://ejohn.org/blog/re-securing-json/ for more info.