app.use(helmet({
    contentSecurityPolicy: {
        directives: {
            frameAncestors: [
                'https://mydomain.eu.auth0.com'
            ]
        }
    }
}));