Add secure noscript route for global header