fix missing Strict-Transport-Security header
revert changes in ssl.conf