Testing hsts header for https redirect