Add X-Frame-Options DENY in middleware.
Move wrap-x-frame-options to outside wrap-exceptions.
Merge pull request #173 from ato/wrap-x-frame-options

Add X-Frame-Options DENY in middleware.