added django.middleware.clickjacking.XFrameOptionsMiddleware