Tom,

You could try to set this value in the global.asax file:

protected void Application_BeginRequest()
{
   Response.AddHeader("X-Frame-Options", "ALLOW-FROM http://www.auditorcontroller.org");
}

Happy DNNing!
Michael

My Global.asax file is like this:

<%@ Application Inherits="DotNetNuke.Web.Common.Internal.DotNetNukeHttpApplication" Language="C#" %>

and I couldn't add the code in the thread because the website would go down.

I ended creating a module that I put on every page, that suppresses the XFrame option.  Here is the VB code

 AntiForgeryConfig.SuppressXFrameOptionsHeader = true