Add a SecurityHeadersFilter with security headers set

Fixes #2567