CLC-4591, Bump master versions/application.txt to 49
CLC-4587 - Disabled X-Frame-Options:DENY header for UserApiController#am_i_logged_in as well as all endpoints served by CanvasCourseGradeExportController
OEC-486, rake oec:courses requires clean directory; no dep on timestamp
Merge pull request #3188 from redconfetti/CLC-4587-xframe-deny-requests

CLC-4587 - Resolving issues caused by X-Frame-Options header with LTI tools in Safari
Merge pull request #3187 from johncrossman/CLC-4591

CLC-4591, Bump master versions/application.txt to 49
Merge pull request #3189 from johncrossman/OEC-485

OEC-486, rake oec:courses requires clean directory; no dep on timestamp