Added extra clickjacking/xss headers