added test and source for setting hsts header