Increasing web apps security with the power of http headers