Add some more secure headers to nginx.

Namely, the X-Frame-Options to prevent people from exploiting our site using clickjacking.