How to Secure Drupal HTTP Headers