Now you can't iframe jsbin.com

Note that zero comments allowed as we use them to kill jsbin in iframe mode
Fixed embedding

Fixed #1634

Also added some more defaults to protected urls.

Tweaked embedded styles, and also ignore user template when cached.
Merge pull request #1630 from jsbin/fix/secure-iframing

Now you can't iframe jsbin.com