Fixed possible clickjacking using X-Frame-Options and added more validation