Send X-Content-Type-Options:nosniff header for all responses
 - #1450