Mitigate possible Flash CSRF vulnerability

See http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/

Props @iandunn for disclosing this issue to the team.
Add 1.1.1 changelog
Merge pull request #369 from WP-API/flash-csrf-mitigation

Mitigate Flash CSRF issue