Add security headers

[lavgup]

Modifies next.config.js to add security headers for XSS, CSP etc. Also chooses to opt out of Google's FLoC tracking.

[IanMitchell]

Oh lawd, I'm gonna have to spend a lot of time researching these to figure out what they do lol