Security Headers

Not a huge deal for now but familiarizing stuff with [secure headers](https://github.com/twitter/secureheaders) since I need to add it to a few other apps.