nginx config: add frame-options sameorigin to everything but the chat, also make the config a bit neater
nginx config: fix the frame-options exclusion so its not fakeable by just including the embed/chat string somewhere
nginx config: make sure xss-protection header is sent
nginx config: make sure the security-policy is sent also
forgot to remove the removed emotes from the config