Inclusion of helmet to prevent a bazillion of attacks

Ahoy, not sure what are your plans for it. But to prevent basic attacks into your webapp, I think helmet is a nice to have (https://npmjs.org/package/helmet)

For now all features are disabled, because don't want to mess up with what you guys have been working