HSTS includeSubDomains, Better Password Strength Meter, Remvoe fallback to http websocket