Add missing ASDF dependence.
Clickjacking protection using the X-Frame-Options header.
Don't crash on a HEAD request.
Doc string correction.