Turn x-frame-options tests into CSP tests