[add] headers: nosniff