dont send x-frame-options header
Merge pull request #2 from codeforamerica/allow_frames

dont send x-frame-options header