Refactoring servlet filter to support x-frame-options

This PR aims to support http://tools.ietf.org/html/draft-ietf-websec-x-frame-options-02. The goal is to prevent clickjacking attacks