title: Header "Strict-Transport-Security" twice in response with Swisscom CloudFoundry application
body: <p>When using the Swisscom CloudFoundry solution with a Spring Boot application, two <code>Strict-Transport-Security</code> headers are added to a HTTPS response. I have looked into this issue, and found out that several headers are added by the CloudFoundry solution. Spring Boot, by default, already adds the <code>Strict-Transport-Security</code> header too (on secure sites) which leads to two different HSTS headers.</p>
  
  <p>I would like to configure the headers of my application within my application. Is there a way to disable this automatic header adding of the Swisscom CloudFoundry solution?</p>
  
  <p>If not, is there a way to tell the Swisscom Cloud to overwrite existing <code>Strict-Transport-Security</code> headers instead of appending it to the list of headers?</p>
  
  <p>A HTTP response from the Spring Boot application, deployed the Swisscom Cloud, then contains the following two headers:</p>
  
  <pre><code>Strict-Transport-Security:max-age=31536000 ; includeSubDomains
  Strict-Transport-Security:max-age=15768000; includeSubDomains
  </code></pre>