Moved X-UA to http headers