Add config.action_dispatch.default_headers.clear for iFrame compatibility