added note about X-Frame-Options