remove X-Frame-Options from the code, this is done by the Apache configuration now, update README