Add security headers, configured on or off in .env, provided by helmet module for bug 1017175
Change headers to default to more secure
Add a note about HSTS in the README
fix #1265 flathead to appmaker
fix 1342 updates to sample.env
removed commented code
Move README info about sec headers, clean up .env file, set HSTS disabled to true for devs
Merge pull request #1343 from ScottDowne/t1342

fix 1342 updates to sample.env
fix #1288 stop silly sizes of install button
Bug 1021746 - Update to webmaker-auth-client v0.1.5
refactored so that logs, notifices and errors are all reported in a single location for easy dialoging
Merge pull request #1218 from Pomax/puberrnotify

publish error notifications
Merge pull request #1387 from ScottDowne/t1288

fix #1288 stop silly sizes of install button
click phone's name -> (re)name app
healthcheck
Merge pull request #1412 from Pomax/healthcheck

healthcheck
Merge branch 'helmetheaders' of https://github.com/jdotpz/appmaker into jdotpz-helmetheaders

Conflicts:
	app.js
Merge branch 't1265' of https://github.com/ScottDowne/appmaker into ScottDowne-t1265
Reverting a couple s/flathead/appmaker/ changes
scrollable app/component lists