growing xsecuity plugin
x-content-type-options header and test