title: Headers in Tomcat
body: <p>I want to set two headers at Tomcat level. Setting these on Apache level will affect my applications. 
  Below two headers  </p>
  
  <pre><code>Set-Cookie HttpOnly;
  Secure Strict-Transport-Security: max-age=31536000; includeSubDomains
  </code></pre>