Added http header to prevent clickjacking