title: Disabled HTTP methods on Heroku
body: <p>I have a Ruby on Rails application that is being hosted on Heroku.</p>
  
  <p>For a security review to allow our application, we've been told to disable a number of HTTP methods.</p>
  
  <blockquote>
    <p>"The application web server must be configured to disable the TRACE
    and other HTTP methods if not being used."</p>
  </blockquote>
  
  <p>Is this possible with Heroku? If not, is there a way to disable these methods on the application level? </p>