Added "X-Frame-Options" clickjacking protection
https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options