Remove `preload` from the default HSTS configuration in the README.
Remove `preload` from the default HSTS configuration in the README.

See https://hstspreload.org/#opt-in

jacobbednarz/secureheaders,twitter/secureheaders