Set X-Frame-Options to SAMEORIGIN in the OIDC UI configuration

[gorbunkov]

We should add something like this:

http.headers(headers -> {
    headers.frameOptions(frameOptions -> {
        frameOptions.sameOrigin();
    });
});