Adding secure HTTP headers