Set security related headers by default