CLC-3592 - Disabled X-Frame-Options header in CanvasLtiController. Added ApplicationController#disable_xframe_options.