Only use strict transport security for the discourse domain
Merge pull request #114 from Stealthii/hsts-nosub

Only use strict transport security for the discourse domain