# prevent clickjacking attacks
Header unset X-Frame-Options
Header set X-Frame-Options SAMEORIGIN
