This sets X-FRAME-OPTIONS: DENY