add HSTS header to Apache sample