adding x-hidden denied