Working on HSTS functional tests.

1. Our implementation of using CURL is not recongizing HSTS
from https://paypal.com

2. We need to think about how to construct a test server with trusted CA.
Distribute a system-wide cert is okay, but we might require users to
actually generate their own if they wish to execute those (think about
automated testing internally within Mozilla.