Bump up the HSTS time again, but without subdomains
Go back to the default HSTS time of one year
Add support for Coinbase
Try to maintain Google refresh tokens better
Move Flickr over to its newly-secured API domain