FIX: Disable Strict-Transport-Security by default.

Strict-Transport-Security is quite hard to remove. So it is disabled by default.