Switch `X-Frame-Options` header off by default for comparability reasons