Remove unsecure JSONP

Controller returned responses in JSONP format when a caller specifies a
callback, and malicious sites can get this information by embedding a
snippet like this in their sites:

<script>
function f(user) {
    alert(user.username);
}
</script>
<script src="http://mymeanjsapp.com/users/me?callback=f"></script>