Removed Strict-Transport-Security header

Should be added by the web server