X-Frame-Options as string not sym