Add optional SSL header Strict-Transport-Security.

When using SSL, it is now a good practice to enforce Strict-Transport-Security.
Reference: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security