selectively disable X-Frame-Options in rack protection