Add security headers, configured on or off in .env, provided by helmet module for bug 1017175
Change headers to default to more secure
Add a note about HSTS in the README
fix #1265 flathead to appmaker
removed commented code
Move README info about sec headers, clean up .env file, set HSTS disabled to true for devs
healthcheck
Merge pull request #1412 from Pomax/healthcheck

healthcheck
Merge branch 'helmetheaders' of https://github.com/jdotpz/appmaker into jdotpz-helmetheaders

Conflicts:
	app.js
Merge branch 't1265' of https://github.com/ScottDowne/appmaker into ScottDowne-t1265
Reverting a couple s/flathead/appmaker/ changes
noxmox s3 publishing for local usage