Fixed it... You had for your 'SSL Hardening':
This blocks iframes. Commented it out and it works just fine now...
Problem solved!
Code:
Header always set X-Frame-Options DENY
Problem solved!