Set security related http-headers in Go