added test when hsts header is already set in response