Simple clickjacking protection