Remove duplicate definition of MIDDLEWARE_CLASSES in settings

... and enable clickjacking middleware, enabled by default since Django
1.6