HSTS and other security headers

[enjoythecode]

• Security headers with Flask-Talisman, including HSTS
• Custom Content-Security-Policy header that allows unsafe-inline style-src and connect-src for relevant ws:// and wss:// headers