Implement API non-RESTful format, JSONP, CORS

Fixes #53.
Personally, I prefer non-nested logic, i.e. `not req.query.format and not req.query.callback`. (http://en.wikipedia.org/wiki/De_Morgan's_laws)