Removed security in response headers