Fix header issue with svg being used inside objects

object is a psuedo iframe and so require we send the X-Frame-Options header not as DENY
Merge pull request #1847 from jsbin/fix/xframeoptions

Fix header issue with svg being used inside objects