removing Strict-Transport-Security header.

ref: RFC 6797