flask-talisman sets a couple best practice security headers that we would benefit from https://github.com/wntrblm/flask-talisman