feat(server): Add `x-content-type-options: nosniff` headers to prevent browser content type sniffing.

fixes #1165
Merge pull request #1309 from mozilla/issue-1165-nosniff

feat(server): Add `x-content-type-options: nosniff` headers to prevent browser content type sniffing.