Updating to 1.532.2 so that SECURITY-80 / JENKINS-21881 can be tested.
[FIXED JENKINS-21842] Use st:setHeader to overwrite any X-Frame-Options set by core.