add clickjacking middleware and better instructions on article fields