Added nosniff header to ensure our Content-Type setting is honored
(cherry picked from commit a1892aaf3828e92238e86905b1da9fb7d1a285bc)