Bug 944824 - Add X-Frame-Options, X-XSS-Protection and X-Content-Type-Options headers