add security http response headers with helmet, fix ui-hootstrap reference in index.html