Add stricter x-frame-options (deny)
Add missing escapes in admin and remove recent users.