Anti-clickjacking X-Frame-Options header. Closes #287.
Fukken fix.