testing for HSTS