Swapped security header links

X-XSS-Protection and X-Content-Type were mixed up. Switched them to point to the right locations.
Merge pull request #3633 from muymoo/patch-2

Swapped security header links