fix a pretty bad bug with escaped hex sequences being incorrectly read if the characters a-f were used (instead of A-F)
allow disabling of member hashing via Options; it's possible for a malicious JSON provider to exploit it force a collision.  It's not a *big* attack really (they could just put the bad value in the collided key) but better safe than sorry.