Add Frame Security Options header

I am starting with this one.  This adds the ability for SMF to send a header to control frame options.  All modern browsers support the basic functionality. Extended functionality to support ALLOW-FROM is not yet fully supported.  Also mobile support seems to be unknown at this point.  This improves SMF's security by preventing clickjacking.

https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options