x-frame options to allow naked domain.