DOCO - Added warning about x-frame-options DENY breaking toolbar

My apologizes, I blurred `ALLOW-FROM uri` and `SAMEORIGIN` into one -- doesn't help that is what Chrome reports is the problem (that message is direct from Chrome).