~gems: Added our fork of rack-protection to set X-Frame-Options which
will allow the iframe form post sent by the frontend via
jquery.iframe-transport
Configured Rack::Protection to set X-Frame-Options for our frontend.
When a request came from jquery.iframe-transport we render HTML in
the way they propose.