Anyone seeing for production deployments through Replit where you have multiple strict-transport-security in headers? If your code is adding HSTS strict-transport-security check it out and see. My theory is Google Cloud (Replit’s cloud server for prod) is adding its own HSTS, but can’t confirm this 100% so could use some others to review to confirm. Thanks!