Security headers

@isaacs please review