Remove hardcoded Strict-Transport-Security header.
Remove hardcoded Strict-Transport-Security header.

We want to control this per application in the webserver,
which seems a more appropriate place to handle this kind of configuration.

thijskh/OpenConext-engineblock,thijskh/OpenConext-engineblock,thijskh/OpenConext-engineblock,thijskh/OpenConext-engineblock