37a0fa4094
* fix(frontend-2): routes to /authn should set x-frame-options header to deny * fix(frontend1): do not render authn route if in an iframe * fix(nginx): should log in json format