Simplify the null check in Home.cshtml
Add NWebsec.Owin to Nancy.Server and enable Content-Security-Policy, X-Content-Type, X-Frame-Options and X-Xss-Protection headers