Add X-Frame-Options: deny to OAuth token requests
Add X-Frame-Options: deny to OAuth token requests

This avoids clickjacking attacks

osuripple/hanayo,osuripple/hanayo,osuripple/hanayo,osuripple/hanayo