Disable X-XSS-Protection, re: #41