Add SecureHeaders gem

This pull request adds https://github.com/twitter/secureheaders to the project.

I think this mostly works...