Use Strict-Transport-Security header

As James
I would like my browser to remember to use HTTPS
So that I don’t feel stupid when I forget to type https:// in the
address bar
Merge pull request #184 from alphagov/feature/strict-transport-security

Use Strict-Transport-Security header