add additional security headers