allow the prevention of the LMS/CMS from being renderable in an iframe
Merge pull request #2716 from edx/cdodge/prevent-clickjacking

allow the prevention of the LMS/CMS from being renderable in an iframe