Review Security Headers Change

Review changes to response headers and cookies for weakened security settings.

• review
• code