Add security headers.
Merge pull request #269 from mozilla/security-headers

Add additional headers.