configured correct X-Frame-Options