removed x-frame-options from config