Added XSS Security header (X-Frame-Options)

Don't know if is ok to put it at the end of the .htaccess or have to be moved to another place