X-Frame-Options header

Some suggested X-Frame-Options to be set since we're having remote voting, which might be embedded.

Not sure if it is OK to put at `Controller->view(string)` function. Please help review this.