allow x-frame-options for ad