Extra security headers

Weed need to be able to defined some extra headers (with those default values):

```conf
Header always append X-Frame-Options DENY
Header always append X-XSS-Protection 1
Header always append X-Content-Type-Options nosniff
``` 