set X-Frame-Options = ALLOWALL