added logfile to gitignore, turned on clickjacking protection middleware