add example of explicit and implicit use of FrameOptions.Deny