feat(security): #314 include all proposed security headers

main.go

@@ -129,11 +129,8 @@ func createHandler(d *sql.DB, serverSettings *types.Settings) http.Handler {
 		router,
 		middleware.Log,
 		middleware.CacheControl,
-		middleware.ContentSecurityPolicy,
-		middleware.Cors(serverSettings),
+		middleware.SecurityHeaders(serverSettings),
 		middleware.Authenticate(authService),
 		middleware.CrossSiteRequestForgery(authService),
-		middleware.Corp,
-		middleware.Coop,
 	)
 }