Wrapping browserid verify view with xframe_allow.