added XSS headers and updated docs