Turn on click jacking protection.

Change-Id: I9c1e21f3e05ca272e2e370b11691858583928cb5
Remove flatpages, we don't use it.

Change-Id: Ic7c0cade91b5fea9e8e99f594c1099dc457d06ea