Resolve 3 security issues in Java Spring Boot Application.

1. Cleartext submission of password
The page contains a form which is submitted over clear-text HTTP

2. Session ID exposed
Session ID is vulnerable to theft and may lead to Session Hijacking, Therefore, Session ID should never be sent over unencrypted transport and should never be cached. The application should be examined to ensure that encrypted communications are both the default and enforced for any transfer of Session IDs. Furthermore, the Session ID should not be visible.

3. Strict transport security not enforced
The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption, and use the application as a platform for attacks against its users. This attack is performed by rewriting HTTPS links as HTTP, so that if a targeted user follows a link to the site from an HTTP page, their browser never attempts to use an encrypted connection. The sslstrip tool automates this process.