More security things

server.js

@@ -31,12 +31,9 @@ app.use(
     }
   })
 );
-app.use(
+app.use(helmet());
-  helmet({
+app.use(helmet.frameguard({ action: "sameorigin" }));
-    frameguard: false
+app.use(referrerPolicy({ policy: "origin" }));
-  })
-);
-app.use(referrerPolicy({ policy: "origin-when-cross-origin" }));
 
 app.use(cors());
 mongoose.promise = global.Promise;