API

Describe the bug
Using xframe ALLOW-FROM throws error in console: Invalid 'X-Frame-Options' header encountered when loading 'https://api.dev.mysite.com/uploads/my-file.pdf': 'ALLOW-FROM dev.mysite.com' is not a recognized directive. The header will be ignored.

https://strapi.io/documentation/v3.x/concepts/middlewares.html#response-middlewares
instructions for xframe indicate `ALLOW-FR

Hi and thank you for this great API.

Please made a Postman collection for version 3.

From what I can tell, the ApiResponse objects can never have an undefined config.

Config is defined as optional here:
https://github.com/infinitered/apisauce/blob/master/apisauce.d.ts#L44
But is required here:
https://github.com/infinitered/apisauce/blob/master/lib/apisauce.ts#L200

Tested in search and list methods, scoreText shows ' Rated 4.3 stars out of five stars ' instead of 4.3

What's your browser and operating system? (Copy/paste the output of https://www.whatismybrowser.com/)

Firefox

What is the problem?

There does not seem to be a way to get the z-coordinate of a point in orthophoto.

What should be the expected behavior?

The measure

What you did:

Create a route:
/orders/*
then set the delay to 2000ms.

What happened:

route not delayed when hit with another param beside *
/orders/1 not delayed

/orders/900 not delayed
/orders/* delayed
![image](https://user-images.githubusercontent.com/19