Security Upgrade

Added to _headers :

  /*

  X-Frame-Options: DENY

  X-Frame-Options: SAMEORIGIN

  X-Content-Type-Options: nosniff

  X-XSS-Protection: 1

This prevents clickjacking, MIME sniffing attacks, and XSS attacks.