DNT documentation and reference
X-Content-Type-Options documentation and reference
httpOnly documentation and reference
X-Frame-Options documentation and references
X-Frame-Options references, remove Frame-Options as draft has expired
recently
Strict Transport Security reference