allow string '0' or '1' values for xss protection
Merge remote-tracking branch 'upstream/master'

Conflicts:
	lib/secure_headers/headers/x_xss_protection.rb
Allow integer values for hsts max_age (per example in README)