Added config for X-UA headers & MEF import. Closes #291 & #287