How do I disable secure headers? This doesn’t seem to work:

(def service {:env :prod
              ::http/enable-csrf nil
              ::http/secure-headers nil
              ::http/allowed-origins {:creds true :allowed-origins (constantly true)}
              ::http/routes routes
              ;; Root for resource interceptor that is available by default.
              ::http/resource-path "/public"
              ;; Either :jetty or :tomcat (see comments in project.clj
              ;; to enable Tomcat)
              ::http/type :jetty
              ::http/port 8080})

so I've created a new project with the lein template, and fired up the repl with lein repl, (def serv (run-dev)). when I make a change to server.clj, my repl isn't reloading the source.

i'm following this guide: http://pedestal.io/guides/developing-at-the-repl

OK, so I need to (require 'my-namespace.server :reload). that command should be in the docs