Security related headers. Based on https://github.com/twitter/secureheaders