Enable HTTP Strict Transport Security (HSTS)

This causes browsers to interact with `wget.sh` using only secure HTTPS connections.
Merge pull request #3 from mathiasbynens/hsts

Enable HTTP Strict Transport Security (HSTS)