fix x-frame-options problem