CQI-166: added secuiry headers for CSRF and JWT

[lruzicki]

Ticket:
https://openimis.atlassian.net/browse/CQI-166

Changes:

• CSRF and JWT have security headers configured for production

How was it tested?
Setting up PROD mode allowed to inspect with developer tools requests and headers of cookies stored in storage.

[dborowiecki]

@lruzicki This PR seems to have same contributions as #256 if that's the case then please close it and we will handle the ticket in scope of CQI-157

[lruzicki]

@lruzicki This PR seems to have same contributions as #256 if that's the case then please close it and we will handle the ticket in scope of CQI-157

It's a bit different, the only change should be a target. 166 into 157 not into develop. 166 adds missing seucrity headers different from JWT and CSRF.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud