diff --git a/app/app/templates/components/document/document-sidebar-toc.hbs b/app/app/templates/components/document/document-sidebar-toc.hbs
index 57659328..d09d8bce 100644
--- a/app/app/templates/components/document/document-sidebar-toc.hbs
+++ b/app/app/templates/components/document/document-sidebar-toc.hbs
@@ -1,6 +1,6 @@
 <div class="document-structure">
     {{#if this.session.authenticated}}
-        <div id="tocToolbar" class="toc-controls {{if state.actionablePage 'current-page' ''}}">
+        <div id="tocToolbar" class="hidden-xs hidden-sm toc-controls {{if state.actionablePage 'current-page' ''}}">
             <div id="toc-up-button" class="round-button-mono {{if state.upDisabled 'disabled'}}" data-tooltip="Move up" data-tooltip-position="top center" {{action 'pageUp'}}>
                 <i class="material-icons">arrow_upward</i>
             </div>
diff --git a/app/app/templates/components/document/document-sidebar.hbs b/app/app/templates/components/document/document-sidebar.hbs
index 005e9f05..3e01a8ee 100644
--- a/app/app/templates/components/document/document-sidebar.hbs
+++ b/app/app/templates/components/document/document-sidebar.hbs
@@ -1,6 +1,6 @@
 <div class="document-sidebar">
 	{{#if session.authenticated}}
-		<div class="summary-line">
+		<div class="summary-line hidden-xs hidden-sm">
 			<ul class="items">
 				<li class="item">
 					<div id="owner-avatar" class="avatar" data-tooltip="{{owner.fullname}}" data-tooltip-position="right middle">{{owner.initials}}</div>
diff --git a/documize/api/endpoint/router.go b/documize/api/endpoint/router.go
index af80564c..62cbbf39 100644
--- a/documize/api/endpoint/router.go
+++ b/documize/api/endpoint/router.go
@@ -235,6 +235,10 @@ func metrics(w http.ResponseWriter, r *http.Request, next http.HandlerFunc) {
 	w.Header().Add("X-Documize-Version", AppVersion)
 	w.Header().Add("Cache-Control", "no-cache")
 
+	// Prevent page from being displayed in an iframe
+	w.Header().Add("X-Frame-Options", "DENY")
+
+	// Force SSL delivery
 	// if certFile != "" && keyFile != "" {
 	// 	w.Header().Add("Strict-Transport-Security", "max-age=63072000; includeSubDomains")
 	// }