remove HSTS (see V8-6156)

public/.htaccess.skeleton

@@ -7,7 +7,7 @@
     Header set Origin-Agent-Cluster "?1"
     Header set Permissions-Policy "camera=(), display-capture=(), fullscreen=(), geolocation=(), microphone=()"
     Header set Referrer-Policy "no-referrer"
-    Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload;"
+    #Header set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload;"
     Header set X-Content-Type-Options "nosniff"
     Header set X-DNS-Prefetch-Control "off"
     Header set X-Download-Options "noopen"