adding headers as described here https://peterthaleikis.com/posts/how-to-improve-the-security-of-your-netlify-site/ to site