changed x-frame-options for extension iframe