Thank you for the reply riking. Do you make these changes in the app.yml? In the app.yml I have tried:
DISCOURSE_ENABLE_CORS: true
DISCOURSE_CORS_ORIGIN: '*'
and
DISCOURSE_ENABLE_CORS: true
DISCOURSE_CORS_ORIGIN: 'www.ghostforbeginners.com'
and
DISCOURSE_ENABLE_CORS: true
DISCOURSE_CORS_ORIGIN: 'www.ghostforbeginners.com*'
and a few others like including https and what not.
None of which change the outcome. Still get the same x-frame problem. I tried adding them under the env: section, and also near the bottom with no change.