Express middleware to add an X-Frame-Options response header