Security headers (cors / CSP, etc.) have been implemented on the backend, but as nuxt is rendering HTML, we need them on the frontend too