Hey folks, we need to remove the following header from our hosted auth page:

x-frame-options: SAMEORIGIN

Since we use the silent iframe method of authenticating people into the app.

open ticket on this one please