Adding the X-Content-Type-Options header