X-Frame-Options to prevent framing of sign-in page, issue #11