Adding use of anti-clickjacking X-FRAME-OPTIONS header.

@rev eric.anderson@
@bug W-1969174@
Merging origin/fabbott/master-pending/clickjack into master