2.1.0: X-Content-Type-Options: nosniff

• Added X-Content-Type-Options: nosniff to headers to prevent UAs
  from performing guesswork. See https://mimesniff.spec.whatwg.org/ and
  https://webhint.io/docs/user-guide/hints/hint-x-content-type-options/
  (@thekid)