Add item about x-frame-options to README.md