Checking HSTS directive value in the plugin. See #3.

We are still unable to write tests for local servers because curl has to
be know our self-signed cert.
Fixed #95. self._format should be called self._format_method.