- added HSTS option for additional HTTPS security
- added auto redirection from HTTP to HTTPS if apiSSL is enabled