Security Headers for this site

Added security headers this week.

Went from rating D/35 to A+/115 on https://observatory.mozilla.org.

Easy peasy, although CSP needed some reading into.