Add HSTS option to appsec in middleware.json.  Issue #56