Set header to mitigate click jacking attaks