app.js: add strict header