support hsts headers

http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec-04#page-14
set max-age to 1 year
Merge pull request #36 from github/hsts

Support HSTS headers
Merge remote-tracking branch 'public/master'