added Header always append X-Frame-Options SAMEORIGIN to htaccess file