set default HTTP headers to enhance security
Merge pull request #29 from ministryofjustice/default_http_headers

Set default HTTP headers to enhance security