Allow X-Frame for app