Add support to selectively disable some of the security headers
that get added by default. Also fix some broken CSS.