Escape non-ascii characters in injected payload

This is a fix for #10 (and a test for that fix). It adds a dependency ([ascii-json]).

[ascii-json]: https://www.npmjs.org/package/ascii-json