now stripping hsts requests from headers