tweaking HSTS config