api.rb in actionpack-6.0.0.beta1

- old
+ new

@@ -10,11 +10,11 @@
   # \Rails controller provides, allowing you to create controllers with just the
   # features that you need for API only applications.
   #
   # An API Controller is different from a normal controller in the sense that
   # by default it doesn't include a number of features that are usually required
-  # by browser access only: layouts and templates rendering, cookies, sessions,
+  # by browser access only: layouts and templates rendering,
   # flash, assets, and so on. This makes the entire controller stack thinner,
   # suitable for API applications. It doesn't mean you won't have such
   # features if you need them: they're all available for you to include in
   # your application, they're just not part of the default API controller stack.
   #
@@ -120,9 +120,10 @@
       BasicImplicitRender,
       StrongParameters,
 
       ForceSSL,
       DataStreaming,
+      DefaultHeaders,
 
       # Before callbacks should also be executed as early as possible, so
       # also include them at the bottom.
       AbstractController::Callbacks,
 