Add secure HTTP headers