COMETD-557 - JSONP transport gives "async not started".
Merge branch 'COMETD-557'
COMETD-546 - Security - JSONP callback param validation is needed.

Added check on the length of the callback param value, and validation on the characters that it may have.
Cosmetics.
Removed old comment no longer valid.
Added CONTRIBUTING file.