Move appConfig higher up
Security headers