Update app/index.html

ClickJacking Defense
Merge pull request #2 from livedata/patch-1

Update app/index.html to avoid https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet