Add HSTS check, fix #2