Add security headers, configured on or off in .env, provided by helmet module for bug 1017175
Change headers to default to more secure
Add a note about HSTS in the README
fix #1265 flathead to appmaker
removed commented code
Move README info about sec headers, clean up .env file, set HSTS disabled to true for devs
fix #1288 stop silly sizes of install button
Bug 1021746 - Update to webmaker-auth-client v0.1.5
refactored so that logs, notifices and errors are all reported in a single location for easy dialoging
Merge pull request #1218 from Pomax/puberrnotify

publish error notifications
Merge pull request #1387 from ScottDowne/t1288

fix #1288 stop silly sizes of install button
click phone's name -> (re)name app
healthcheck
Merge pull request #1412 from Pomax/healthcheck

healthcheck
The removed chunk of code was throwing js errors on saved apps, and also seems redundant, as updateChannelVis gets fired when it is needed anyway.
Merge branch 'helmetheaders' of https://github.com/jdotpz/appmaker into jdotpz-helmetheaders

Conflicts:
	app.js
Merge branch 't1265' of https://github.com/ScottDowne/appmaker into ScottDowne-t1265
Reverting a couple s/flathead/appmaker/ changes
scrollable app/component lists
Merge pull request #1395 from Pomax/applist

fix #1261 - scrollable app/component lists