Add tests for various security minded HTTP headers

Checks for various HTTP header states, loosely based around OWASP guidance from https://www.owasp.org/index.php/List_of_useful_HTTP_headers

Any feedback on this pull request at all let me know. I'll probably add a bunch more checks for various other (mainly security) related things if you're happy to receive them.