Enable x-content-type-options header
Enable x-content-type-options header

Also default x-xss-protection to enabled. These changes
will further improve our HTTP Observatory score.

ericawright/bedrock,CSCI-462-01-2017/bedrock,kyoshino/bedrock,kyoshino/bedrock,alexgibson/bedrock,Sancus/bedrock,schalkneethling/bedrock,kyoshino/bedrock,MichaelKohler/bedrock,CSCI-462-01-2017/bedrock,pascalchevrel/bedrock,pascalchevrel/bedrock,sgarrity/bedrock,hoosteeno/bedrock,pascalchevrel/bedrock,CSCI-462-01-2017/bedrock,craigcook/bedrock,glogiotatidis/bedrock,craigcook/bedrock,flodolo/bedrock,TheoChevalier/bedrock,ericawright/bedrock,sylvestre/bedrock,alexgibson/bedrock,sylvestre/bedrock,sgarrity/bedrock,gerv/bedrock,Sancus/bedrock,TheoChevalier/bedrock,pascalchevrel/bedrock,alexgibson/bedrock,kyoshino/bedrock,Sancus/bedrock,sgarrity/bedrock,schalkneethling/bedrock,hoosteeno/bedrock,TheoChevalier/bedrock,sgarrity/bedrock,mkmelin/bedrock,flodolo/bedrock,ericawright/bedrock,mozilla/bedrock,mkmelin/bedrock,ericawright/bedrock,schalkneethling/bedrock,mkmelin/bedrock,CSCI-462-01-2017/bedrock,schalkneethling/bedrock,flodolo/bedrock,mozilla/bedrock,MichaelKohler/bedrock,Sancus/bedrock,flodolo/bedrock,hoosteeno/bedrock,glogiotatidis/bedrock,MichaelKohler/bedrock,gerv/bedrock,craigcook/bedrock,mkmelin/bedrock,MichaelKohler/bedrock,gerv/bedrock,alexgibson/bedrock,gerv/bedrock,craigcook/bedrock,mozilla/bedrock,glogiotatidis/bedrock,sylvestre/bedrock,mozilla/bedrock,sylvestre/bedrock,glogiotatidis/bedrock,hoosteeno/bedrock,TheoChevalier/bedrock