Enable HSTS on the browserid.org domain

Add the same header as on login.persona.org.

https://bugzilla.mozilla.org/show_bug.cgi?id=779710