Do not send X-Frame-Options header in embeddable widget action