minor update to clickjacking code