XFrameOptions isn't honoured in Secure Cloud 1.55