Added response header for security improvements

The "X-Frame-Options" header will protect against clickjacking.
related to #189