Add note about clickjacking.XFrameOptionsMiddleware