Provide an X-Frame-Option hint in example htaccess

I came with a case where the hosted testswarm was behind a reverse proxy
that was setting X-Frame-Option DENY/SAMEORIGIN by default

I thought it would be good to provide newcomers an hint in example
htaccess that could override reverse proxy value.

Maybe we should set it by default rather than having it commented.