JSON

When sending JSON data, always format the JSON so that the top level is an object, not an array.
See the OWASP guidelines for JSON.