Check browser security headers

Uses the real, limited lightning scan and displays the relevant checks. It does not inspect application code or authenticated pages.