set X-Content-Type-Options to nosnif for jsonp responses
Merge pull request #1810 from patrickkettner/add-nosniff

set X-Content-Type-Options to nosnif for jsonp responses