implemented "X-Content-Type-Options: nosniff" header in reference to issue https://github.com/globaleaks/GlobaLeaks/issues/194