Issue #2661644 by David_Rothstein, kmoll, jweowu, badjava, jribeiro: Integrate with Drupal core clickjacking defense