Filter to set HTTP header X-Frame-Options