Only send the hsts header if the scheme of the call is https
- Added unit tests to test https only functionality.
- Added two more unit tests to test the overwrite branch in the Callback Action.
Merge pull request #1 from estei/only-send-on-https

Only send the hsts header if the scheme of the call is https