add preload token for HSTS