Check HSTS headers on HTTPS request