set express version to latest 3.x version
enable ssl on openshift
added header for strict-transport-security
force https on production
moved strict transport security to production configuration