additional fix for the last commit

and we should do some change to nginx.conf by putting
"add_header X-Frame-Options SAMEORIGIN;" instead of
"add_header X-Frame-Options DENY;"

Signed-off-by: RayAllen <ray@ray-Lenovo-IdeaPad-S400.(none)>