closes #242 by adding 'X-Content-Type-Options:nosniff' header to ClickJackFilter in order to reduce MIME type security risks