Clickjacking protection. Fixes #190