Hsts::enable() should not be static.
Adds initial implementation of HTTP X-Frame-Options.
Adds Http\Xfo to DI container.