add support for setting X-Frame-Options: SAMEORIGIN

i think its fine. let's wait until someone asks or if there's a popular framework that has similar options