[ET][000000] dynamically generated header_widget.js file, allowed cross domain framing from static and portal_sample (IE doesn't allow login)