added x frame options to *