X-Frame-Options settings on Undertow overwrites the settings on RH-SSO REALM side

Issue

• Setting a Realm's Security Defenses X-Frame-Options Header value to "ALLOW-FROM http://..." does not take effect when the X-Frame-Options filter setting at EAP server level (EAP Undertow) which is set with "SAMEORIGIN"
• Realm's Security Defenses X-Frame-Options Header value setting is being overridden by X-Frame-Options filter setting at EAP server level (EAP Undertow)