Add configuration option to enable/disable 'Strict-Transport-Security' HTTP header