remove clickjacking fix from all