@Test
  public void set_secured_headers() throws ServletException, IOException {
    underTest.init(mock(FilterConfig.class));
    HttpServletRequest request = newRequest("GET");

    underTest.doFilter(request, response, chain);

    verify(response, times(3)).addHeader(startsWith("X-"), anyString());

    underTest.destroy();
  }