working on RFC 6797 HSTS (HTTP Strict Transport Security)