osec Scan: free security headers and TLS grade

Grade HSTS, CSP, clickjacking, cookies, TLS versions and certificate health, A+ to F, with copy-paste nginx and Apache fixes.