nginx: tweaked DDOS protection, added clickjacking protection