don't send 'X-AspNet-Version' header
don't send 'X-AspNetMvc-Version' header
obfusicate the 'server' header
removed 'x-powered-by' header
removed 'ARR/2.5' header