Connect/Express middleware to apply X-Frame-Options based on a whitelist