add "x-frame-options" as to enable the iframe embeded of the app web page.