set content security policy
set x-frame-options header
updated content security policy, fixed typeof error in main.js
updated security policy
Merge remote-tracking branch 'upstream/master' into dev
Merge pull request #99 from kennethrapp/master

Set some secure default headers, and type checks in main.js