Made sure only available response is html
Now use a javascript layout that introduce an infinite loop.
This way, it becomes impossible for an attacker to hijack a session and
retrieve sensitive information as per
http://pothibo.com/2013/12/sjr-and-xss-can-be-as-secure/

Also added the closure in the layout as it's how all my response are
built. DRY ALL THE CODEZ