Headers configurations for cookies policy and docs (#241)

* Headers configurations for cookies policy and docs

* Fix localhost configuration

Author: marcospereira

conf/application.conf

@@ -20,10 +20,11 @@ play {
 
   filters {
     headers {
-      contentSecurityPolicy="default-src 'self'; img-src 'self' avatars.githubusercontent.com www.google-analytics.com d379ifj7s9wntv.cloudfront.net; font-src 'self' data: fonts.gstatic.com; script-src 'self' www.google-analytics.com cdn.jsdelivr.net munchkin.marketo.net *.mktoresp.com; style-src 'self' fonts.googleapis.com cdn.jsdelivr.net 'sha256-HNYzPTRt75YR/Yjz4EVJvRKMVMBbL6CMpl655m4gDcw='; connect-src 'self' *.mktoresp.com"
+      frameOptions = "sameorigin"
+      contentSecurityPolicy="default-src 'self'; img-src 'self' *.githubusercontent.com www.google-analytics.com d379ifj7s9wntv.cloudfront.net; font-src 'self' data: fonts.gstatic.com; script-src 'self' www.google-analytics.com cdn.jsdelivr.net munchkin.marketo.net *.mktoresp.com optanon.blob.core.windows.net 'sha256-Mz1BSEhQ2FXaHzVWxucxc0+PCwT6oyt/5UPqDVlUugs=' 'sha256-1IG7kxxg7+f1m8Iu+Dk44NMBBV2ZjAkq7dalJrzDJMM=' 'sha256-n73RBf/LVzJGkBNoNFYhY2JnwJDTOX/xUOK5XYVcFOI=' 'sha256-DScy2dpFEzZofKeEv/orAZJj/q21B49aHew7suEpfFs=' 'sha256-17TcZWrBMS5XH+2P8hJM6WdgJNdvHZC6w6nhVdCKQoA='; style-src 'self' fonts.googleapis.com cdn.jsdelivr.net 'sha256-HNYzPTRt75YR/Yjz4EVJvRKMVMBbL6CMpl655m4gDcw='; connect-src 'self' *.mktoresp.com"
     }
     hosts {
-      allowed = [".playframework.com", "localhost:9000", "playframework-com-app"] # playframework-com-app is the upstream host configured in nginx
+      allowed = [".playframework.com", "localhost", "playframework-com-app"] # playframework-com-app is the upstream host configured in nginx
     }
   }
 }