Added a secure headers initializer and enabled secure headers by default.