More validation and removed clickjacking from dev settings