add missing security headers when fetching btc deposit address