Use X-VSF instead of X-SEC to match the rest of the vcl
Merge pull request #2 from ssm/fix/headers

Use X-VSF instead of X-SEC to match the rest of the VCL