fix: ERROR NoMethodError: undefined method `split' for :attachment:Symbol

+ some additional security related headers