Update to call all SecurityHeader methods

Call all methods explicitly, sadly calling `ensure_security_headers` isn't
working