changed X-FRAME-OPTIONS from DENY to same origin to allow iframe integration in buildserver