Added "allow-popups allow-forms" to iframe sandbox

Adding these to sandbox so that link variables can work with forms