Added Strict-Transport-Security: max-age=2592000; includeSubDomains to
safeHeaders()