Add X-Frame header directive

Please add the X-Frame header directive to the app. Maybe even configurable by users, so embedding a map with GPX is possible via iFrames. Currently Nextcloud's global directive "SAMEORIGIN" is used.

I'm overwriting this manually at the moment, prompting a security warning in the admin interface.