Merge pull request #352 from broadinstitute/AN-119-remove-server-vers…

…ion-from-banner

[AN-119] remove server version from banner

src/main/resources/reference.conf

@@ -32,6 +32,11 @@ akka {
 
 akka.http.server.idle-timeout = 95 s # Akka default is 60 s
 akka.http.server.request-timeout = 65 s # Akka default is 20 s
+# By default, akka includes an HTTP header in responses that looks like:
+# server=akka-http/10.20.1
+# For better app sec, we suppress this to make it harder for attackers to learn about our system.
+# Akka doc: https://doc.akka.io/docs/akka-http/current/configuration.html
+akka.http.server.server-header = ""
 
 dispatchers {
   # A dispatcher for futures/actors performing blocking io operations