implemented support for https://github.com/globaleaks/GlobaLeaks/issues/949
x_frame_options now accepts confiogurations only for deny and allow-from modes