Alan Orth
a5f8ab6182
Always add security headers, not just for successful HTTP response codes. See the nginx `add_header` docs.