Only return HSTS in https mode