remove unneeded comma (#3201)

Author: rpivo

src/content/docs/security/http-headers.mdx

@@ -50,7 +50,7 @@ The header names are limited to:
 - with an Object/Key-Value, where the values must be strings
 - with null
 
-The header values are always converted to strings for the actual response. Depending, on how the configuration file looks, some header values need to be composed.
+The header values are always converted to strings for the actual response. Depending on how the configuration file looks, some header values need to be composed.
 Those are the rules on how a composite gets created:
 
 - `string`: stays the same for the resulting header value