security: Prevent XSS attacks

Add the following headers to Kimchi responses:

X-Frame-Options DENY;
X-Content-Type-Options nosniff;
X-XSS-Protection "1; mode=block";

And Content-Security-Policy for error pages.

Signed-off-by: Aline Manera <alinefm@br.ibm.com>