add flask-sslify to make app HSTS aware

Flask-SSLify handles adding the Strict-Transport-Security HTTP header to
inform browsers that they should always use HTTPS.