Add support for excluding pages to prevent_clickjacking()