Add wrap-xss-protection middleware