[stable29] fix(settings): define a 'heartbeat' route, so SecurityHeaders can handle redirected root#45956