set default HTTP headers to enhance security
Merge pull request #3 from ministryofjustice/default_http_headers

Set default HTTP headers to enhance security