I assume you still have the clickjacking option disabled?
I don't really see what could really cause this. We don't have any frame detection (other than the click jacking header).
I suppose I'd need 2 URLs to demonstrate this: one with the problem and one without.