added frame options and CSP security headers