ENH: add clickjacking middleware

Provide clickjacking protection for site