Update Oasis.js to support `allowSameOrigin`
A card can specify options for conductor with child cards.

* Remove border on iframes added by the latest version of Chrome
Update Oasis.js to master