remove secureheaders and csp_browser as legacy old commit stuff. Shouldn't have been in this PR.