Security Configuration Changes

Configured project to remove headers etc disclosing implementation
details, hide all exception information behind custom error page in
release mode, only allow httpOnly Cookies etc.