fixed: panel is not showing when clickjacking protection is activated