Should be enough to turn off server_tokens in the http context