headers vulnerability scan