Add the X-Frame-Options header

I read somewhere this prevents clickjacking. Might be a good idea.
Add art processing