Add helmet npm middlewares

Adds x-frame-options (DENY) and Strict Transport Security headers