Adds helmet and a few security header options

Adds in some HSTS, iexss, and x-frame-options headers which are configurable in the local.js config file.

For bug https://bugzilla.mozilla.org/show_bug.cgi?id=1018392 (bug 1018392)