Bug 944824 - Add HSTS, X-XSS-Protection and X-Content-Type-Options headers