Header always unset X-Frame-Options