[fix bug 1069996] Enable X-XSS-Protection header.
Reload, don't restart nginx.
[fix bug 1069970] Add X-Frame-Options HTTP header.
Merge pull request #211 from glogiotatidis/1069996

Security Enhancements