Added two content security headers.

X-Content-Type-Options : nosniff
X-Frame-Options: DENY