Added clickjack exempt headers