Suggestion: Always set charset in response header

[ngyikp]

http://blog.portswigger.net/2016/11/json-hijacking-for-modern-web.html

Also contains other helpful hints too

[Maikuolan]

Anyone want to create a PR for this?