- Add security headers provided by OWASP (https://www.owasp.org/index.php/List_of_useful_HTTP_headers)
- Remove custom header and move to conf/security.conf