removing Strict-Transport-Security header.
ref: RFC 6797