Prepend JSONP response with empty comment to avoid CSRF

Details: 
http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/

Deployed to staging: 
http://test.lobid.org/resource?name=Faust&format=full&callback=test