added support for x-frame-option header