Double `X-Frame-Options SAMEORIGIN`

[wesleyboar]

Describe the bug
Since TACC/Camino@v4.4.0, X-Frame-Options SAMEORIGIN appears twice.

To Reproduce

1. Go to a website loading Camino v4.4.0
2. Open Network tab in Developer Tools.
3. View Response headers.
4. See X-Frame-Options SAMEORIGIN listed twice.

Expected behavior
The X-Frame-Options SAMEORIGIN header appears only once.

Screenshots

Additional context
Nginx sets the header. So does Core-CMS via Django.