ActionDispatch:SSL: don't include STS header in non-https responses
Flag cookies as secure with ignore case in ActionDispatch::SSL
Fix `another_contract` not being used warning
Merge pull request #11075 from vipulnsward/remove_record

Remove `another_contract` as it isn't being used
Add CHANGELOG entry for #10971

[ci skip]

Conflicts:
	actionpack/CHANGELOG.md
Merge pull request #11065 from gbuesing/hstsfix

ActionDispatch:SSL: don't include STS header in non-https responses
Merge pull request #11069 from ykzts/actiondispatch-ssl-secure-flag-igonore-case

Flag cookies as secure with ignore case in ActionDispatch::SSL
Merge remote-tracking branch 'upstream/master'