Add Frame Security Options header
obExit actually doesn't get called for ajax calls
Update Security.php

Some bad headers
Merge pull request #341 from jdarwood007/csp-frame-header

Add Frame Security Options header