Middleware to set the X-Frame-Options header, mitigating things like clickjacking