title: Is there a way to allow Zuul to preserve upstream cache headers when spring security is being used
body: <p>When using Zuul (<code>cloud Edgware.SR3</code>) in spring boot (<code>1.5.10.RELEASE</code>), is it possible to preserve the cache control headers of an upstream system given that spring security is being used. </p>
  
  <p>I think you can set <code>zuul.ignore-security-headers=true</code> but, in my understanding that will remove ALL security related headers (such as HSTS, Frame blocking, xss protection, HPKP etc). </p>
  
  <p>I just want to remove the default spring security no cache headers and favour the up stream response which includes public cache control (for 1 year for example).</p>
  
  <p>Thanks.</p>