DrupalCon Vienna 2017: Using your headers for better security