Add HSTS headers

Add HSTS headers, fixes #3