DOCO - Added warning about x-frame-options DENY breaking toolbar

HTTP header is `X-Frame-Options` and its value is `SAMEORIGIN`. There is no such thing as `ALLOW-SAME-ORIGIN`.