Add xss security header

Added x-frame-options security header, don't know if is ok to put it at the end of the .htaccess or have to be moved to another place