Add X-Frame-Options header

Author: praseodym

openid-connect-server-webapp/src/main/webapp/WEB-INF/user-context.xml

@@ -48,6 +48,9 @@
 <security:logout logout-url="/logout" />
 <security:anonymous />
 <security:expression-handler ref="oauthWebExpressionHandler" />
+<security:headers>
+<security:frame-options policy="DENY" />
+</security:headers>
 </security:http>
 
 </beans>