Adding allow-same-origin for iframe previews in case of logins
Merge pull request #397 from reciprocity/feature/iframe_tweak

Added allow-same-origin to iframe sandbox