CSP frame-ancestors 'self' is set but X-Frame-Options SAME-ORIGIN is not.