Added helmet for added control over client-side protection and
caching headers. Also used to filter out the X-Powered-By header
and others.