Fix #833 - Set security headers on responses
More headers
Merge pull request #892 from NuGet/anurse-833

Fix #833 - Set security headers on responses