The X-Powered header is sent within the response header (unnecessary)

add these lines to .htaccess

Header always unset X-Powered-By
Header unset X-Powered-By