Strip out byte order mark before calling JSON.parse

Fixes an issue reported on the mailing list in which someone was unable to upload a package because the package.json couldn't be parsed. The problem was that the file had a byte order mark at the beginning. This change checks for that.