add testSecurityClickjacking page, + some minor change