removing clickjacking middleware option, bcs it blocks the mobile testing
bugfix for popular badges algorithm