Add commonware 0.4.2.
Fix bug 935464: Add HTTP STS middleware and secure/httponly cookies.