title: Spring boot: Do not send HSTS header
body: <p>In a dev environment I have the problem that my browser (Yandex) redirects (307) an <code>OPTIONS</code> request to the https version of the URL. As we don't have SSL set up  the request then fails with the error <code>Response for preflight is invalid (redirect)</code>.</p>