Prevent loading in a frame through X-Frame-Options

Closes issue #13
Enable Strict-Transport-Security

Max age is set to a year.

Closes issue #12
Set Strict-Transpot-Security on cache manifest

Helps make sure it has the widest reach possible.