Hardened security thanks to CSP and additional HTTP headers (#880)