Added Heroku security-header settings.