Add Clickjacking Protection to WebAppSec Provider

By adding the X-Frame-Options=DENY header to responses, proxied and hosted applications can control whether they can be embedded within another application through Frame, IFrame or Object HTML elements.

Leveraging this to set them all to DENY adds protection against clickjacking for all proxied and hosted applications within the configured topology.