Extra security headers without a home

I've merged your other PRs (as I will probably merge this one) with the intention of reformatting the comments/file to be less than 100chars - if you could edits/additions to 100chars that'd remove a cleanup task for me =).