Fixing a typo into option parameters and inclusion of clickjacking demo

For the future releases we must validate HTTP headers: case sensitive x case insensitive.