Move xframe middleware into its own module

Closes #75.