secureheader config added