A middleware to set X-Frame-Options and X-Content-Type-Options

To be used when wwwhisper is not run with nginx, which already
is configured to set these headers.