Do not send X-Frame-Options when embedded as iframe