Set the X-Frame-Options header to SAMEORIGIN