[REVIEW] Bugfix/540 clickjacking protection

Not for adding the header. Problem here is that we're lacking some kind of front controller.