added security headers and tests.