X-Content-Type-Options nosniff - force our mimetypes