add support for setting X-Frame-Options: SAMEORIGIN