CLC-4587 - Disabled X-Frame-Options:DENY header for UserApiController#am_i_logged_in as well as all endpoints served by CanvasCourseGradeExportController