Revert "experimentally disabled sec headers"
Revert "experimentally disabled sec headers"

This reverts commit 41c3c61ca6d87834f7ea1865f14c56a17672bd95.

mike-goodwin/owasp-threat-dragon,mike-goodwin/owasp-threat-dragon