Fix some HSTS bugs, revert to allowing defaults
Bump to 0.4.0