fixed Typo in header name

Header name must be X-Frame-Options nut X-Frames-Options. Refer to [the docs](https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options)