Add header support for Strict Transport Security (sans tests to follow)