Add security-related HTTP headers to static web site and web-app.
Add security-related HTTP headers to static web site and web-app.

Adds the following headers to the static website content and the web-app
responses (but doesn't modify any of the headers for API responses):

- X-XSS-Protection
- X-Frame-Options
- X-Content-Type-Options

apinf/api-umbrella,apinf/api-umbrella,apinf/api-umbrella,apinf/api-umbrella,NREL/api-umbrella,apinf/api-umbrella,NREL/api-umbrella,NREL/api-umbrella,NREL/api-umbrella