Change security-headers names.

SecurityHeaders is now BrowserPolicy, and some tweaks to function names.