added X-Content-Type-Options info
added X-frame-options info