https://blog.simplr.sh/posts/next-js-basic-security-headers/