add security headers to btc withdraw