Perl web application security - HTTP headers