X-Frame-Options bugfix