Remove XFrameOptionsMiddleware

The XFrameOptionsMiddleware middleware sets the `X-Frame-Options` header, which we already do in our `nginx` instance.

website/thaliawebsite/settings/settings.py

@@ -99,7 +99,6 @@ MIDDLEWARE = [
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.contrib.auth.middleware.AuthenticationMiddleware',
     'django.contrib.messages.middleware.MessageMiddleware',
-    'django.middleware.clickjacking.XFrameOptionsMiddleware',
     'django.middleware.locale.LocaleMiddleware',
     # Our middleware
     'members.middleware.MemberMiddleware',

website/thaliawebsite/settings/testing.py

@@ -39,5 +39,4 @@ _ = [MIDDLEWARE.remove(x) for x in (
     'corsheaders.middleware.CorsMiddleware',
     'django.middleware.http.ConditionalGetMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
-    'django.middleware.clickjacking.XFrameOptionsMiddleware',
 )]