CSP and other security headers
Getting more from SPDY