add optional security header to .htaccess

actually most widely used optional header
all options only commented, they should be adusted to your intallation /
user environment