Set noindex for URls with token

killes@www.drop.org, I agree with the request. But in your code, you are adding header in the foreach() loop and fixed the headers in the array. But others may want to add more headers on such pages. So we can't hardcode this in the code itself.
So I have added a field on settings form for that so one can configure these from the backend. Not it is allowed to add multiple headers on settings form (admin/config/content/access_unpublished) and headers will be reflected on-page.

Fix for failed test cases.

@killes@www.drop.org @martin_klima Would you guys please review this?

Thanks for the work. I cleaned everything up a bit. Update hook is still missing

With update hook

Rerolled

And now with a test

Uh, we have an error in D8.9. Lets quickly fix it

lgtm

Done