always show response headers and show error bodies
escape JSON documents to avoid rendering HTML (and possible XSS)
Merge pull request #5 from sbrauer/inspector-tweaks

always show response headers and show error bodies