Enable HSTS on TLS connections

... break embedded pads, please test