Set security headers using Helmet

[sbrudz]

Set security headers using https://helmetjs.github.io/. For more information, see https://www.owasp.org/index.php/OWASP_Secure_Headers_Project and also run http://observatory.allizom.org/ for test results.