Added "X-Frame-Options" clickjacking protection

https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options