added rhci_plugin, katello, and rack-cors
removed secure headers
config.assets.initialize_on_precompile = false