Enable dev mode also when HTTP_HOST begins with dev. Fix redirects and headers logic and exit as soon as possible.
Contrib: Add Drush Extension -- security_check