CSP, XFO, DNT and STS

added Content-Security-Policy, X-Frame-Options, Do-Not-Track and Strict-Transport-Security middlewares