Added django-secure
Installed djangosecure and djangosecure.middleware.SecurityMiddleware. Enabled SECURE_SSL_REDIRECT, SECURE_CONTENT_TYPE_NOSNIFF = True, SECURE_HSTS_SECONDS = 86400000, SECURE_HSTS_INCLUDE_SUBDOMAINS = True
, SECURE_BROWSER_XSS_FILTER = True
, SESSION_COOKIE_SECURE = True, SESSION_COOKIE_HTTPONLY = True