Removed the security string from all json responses as it is only meant to prevent CSS attacks which won't work on modern browsers or node instances.