Added additional HSTS header checks

In addition to checking for the presence of HSTS header, Garmr should
check to make sure the max-age is set high enough (~180 days) and that
includeSubDomains is set for additional security against new versions
of SSL Strip man-in-the-middle attacks.