A workaround for the servlet form authentication process (j_security_check), which, at least on WildFly 8.1, uses the
HTTP POST method when forwarding the request after successful login.
HTTP headers related to security
For example: HSTS and Clickjacking mitigation support
Note: This implementation has been borrowed from Aerogear Security.