add STS header to all html responses
remove the `importer` script - it's no longer used and kept updated