Add response headers for security improvements

- "X-Content-Type-Options: nosniff" for all responses
- "X-XSS-Protection: 1; mode=block" for HTML responses
Merge pull request #189 from skinny-framework/feature/secure-headers

Add response headers for security improvements