add x frame option header
extended api