Add opting out of Google FLoC to HTTPSecurityPlug headers

Fixes #2630 (closed)

This MR simply adds the proper header to opt out of Google's FLoC to the default response headers sent by the HTTPSecurityPlug.