adding option for HSTS header in app.
Merge branch 'master' of github.com:turtl/api
Merge branch 'master' into local
testing some changes to board/note permissions (with regards to moving note between boards). seems to be fine, however have not fully tested the scenario where the user moves the note into an UNauthorized board (normal moves are working great). need to push tho