Security Enhancements

[timwangmusic]

Description

The app lacks some key security configurations that makes it prone to common security attack schemes.

Solution

• Add a few security headers such as XSS protections
• Enhance cookie security settings
• Remove username from user saved plan details page URL to information leakages.

Testing

• [x] Integration testing on Heroku staging
• [ ] Added new unit tests

Checks

• [x] Have you removed commented code?
• [x] Have you used gofmt to format your code?