adding header and iframe rules, adjusting