Add code coverage via coveralls.io

https://coveralls.io/r/twitter/secureheaders

Signed-off-by: Chris Aniszczyk <zx@twitter.com>