Add support for X-XSS-Protection header.
Make xssProtection value configurable with a good default.
Add optional value to xssProtection docs
Merge pull request #14 from mstuart/master

Add support for X-XSS-Protection header.