[security] Everything you need to know about HTTP security headers http://amp.gs/0c3j