#996: Send X-Frame-Options header to prevent clickjacking attaks
Merge pull request #123 from Quy/996-xfo

#996: Send X-Frame-Options header to prevent clickjacking attacks