Refactoring/disabling sameorigin policy handling

Only needed with experimental iframe mode