Fix bug 856124: Use Django's X-Frame-Options middleware.