updated nugets
add anti-clickjacking mvc attribute