bug 887790: Balrog Admin UI missing security headers. r=mgerva