Add anti-clickjack script

Should also set the appropriate headers when in production
Add default value for new projects
Clean-up