Update strict transport security

- IE12 support
- Link to OWASP