Fix violations of gosec in the golangci.yml lints

[andygabby]

PR #128 introduces some gosec lint exclusion.

We should research and fix the violations of these rules if possible. If the exclusion can't or won't be fixed then add lint exclusion text inline with each violation instead of a global exclude.

.golangci.yaml

  gosec:
    excludes:
      # TODO(#133): Identify, fix, and remove violations of most of these rules
      - G112 # Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
      - G404 # Use of weak random number generator (math/rand instead of crypto/rand)