[FastAPI] Add secure headers/cookies

Currently aurweb has a severe lack of security headers, which would give us some nice security benefits.

The current headers can be viewed on securityheaders.com.

We should be able to set everything except Permissions-Policy.

An option seems to be to use secweb