remove StaySecureMiddleware

We now have HSTS so this is not needed anymore.