Apply suggestion to lib/pleroma/plugs/http_security_plug.ex