added a link to API documentation (at github) to the 'about' page
experimental support for JSONP callbacks

A simple flask decorator, handling 'callback'. The callback name
has to match '^pgxn_[a-zA-Z0-9-]+$' pattern, as a protection against
XSS attacks.