SEC-2230: Update contacts sample to use <headers> with no child elements
SEC-2230: Added testing certificates
SEC-2230: Polish and clickjacking demo