Prevent clickjacking on all pages

Thanks, daksh @ HackerOne!