fix X-Frame-Options