support for preventing json hijacking