FED-355 prepend all jsonp callbacks with /* */  and add X-Content-Type-O...

...ptions: nosniff header