SSL hardening

- remove SSLv3
- set HSTS header
- cipher suite tweaks