Added allow-same-origin flag to iframe