PMOB-4298

It is now possible to disable callback. application.hermod.allowedclients.callbackurl in application.yml is now optional for each API key.

PMOB-4318

Strict transport security (HSTS) support is added for Hermod. HSTS is always enabled and it has no configuration options.

PMOB-4362

Security updates.