Set default HTTP headers to enhance security

* https://www.owasp.org/index.php/Ruby_on_Rails_Cheatsheet#Security-related_headers
* http://ibuildings.nl/blog/2013/03/4-http-security-headers-you-should-always-be-using