Update app/index.html

ClickJacking Defense