Update X-Frame-Options support

The `X-Frame-Options` help text says that it's only supported in IE 8 and Safari.  This is [decidedly outdated information](https://en.wikipedia.org/wiki/Clickjacking#Server_and_client), as Chrome, Firefox and Opera have supported it [for years](https://developer.mozilla.org/en-US/docs/Web/HTTP/X-Frame-Options#Browser_compatibility).

Rather than note that all major browsers support it, I figured we should just remove any note at all, and let that be implied.