set up security headers
Merge pull request #7 from txbits/viktor/security-headers

set up security headers