removing security headers