adding xss-lock and some stuff