added a diagnostic timing filter
tweaked some security headers
added lastmodified support