Allow including some non-harmful pages in iframes

@martijnrusschen ?

Only allows inclusion of the homepage and blog pages in iframes. There should be no clickjacking possible on those pages.