Fix problem where xframe_options didn't get a default