added security protection headers